marker.net
http://chrisdail.com/2008/03/31/apache-cxf-with-http-basic-authentication/